CISA Warns on Zimbra and SharePoint Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns that government agencies should urgently patch vulnerabilities found in Synacor Zimbra Collaboration Suite and Microsoft Office SharePoint. These security flaws, one of which is cataloged as CVE-2025-66376 with a CVSS score of 7.2, have already been exploited by malicious actors. The agency stresses that these vulnerabilities are significant due to their active exploitation, which could pose risks to sensitive government data. Agencies using Zimbra and SharePoint are especially at risk and must prioritize securing these platforms. CISA underscores the urgency of this action to prevent potential compromise and advises immediate steps to mitigate threats. They also remind institutions of the critical nature of staying ahead of such exploits by maintaining up-to-date security practices. For a comprehensive overview of the security threats and suggested measures, read the full article.

https://thehackernews.com/2026/03/cisa-warns-of-zimbra-sharepoint-flaw.html